Website Privacy & Information Handling.

Last updated: 16 October 2026

Website operator and contact

The website is operated under the trading name Sunbridge Heritage by Sun Bridge Heritage Holding Corp., an International Business Corporation incorporated in Nevis, Saint Kitts and Nevis, under registration C 65303. Its registered office is listed below and is also the registered agent’s address.

Information handled during a visit

The website has no user account, document-upload facility, newsletter, advertising integration, or third-party website analytics integration. It does not ask visitors to submit personal documents or payment information through these pages. The only form is the written enquiry form on the Contact page, described below.

Delivering and protecting a website involves technical information. The hosting infrastructure may process IP addresses, browser and device information, requested URLs, request times, and security signals.

Enquiry form on the Contact page

If you use the enquiry form, the name, email address, optional organisation, subject, and message you enter are sent through Resend to the company’s corporate mailbox so that the company can read and answer your enquiry. The form is used only after you confirm that you have read this notice. The message is not copied into the website database, and the form does not use cookies or local storage. To limit abuse, a hashed form of the sender’s IP address and a request counter are kept for a short period (counters expire after one hour and are periodically cleaned). Do not include identification documents, passwords, or payment details in the form.

Purposes and technical providers

Cloudflare hosts and delivers the site and provides network security. Technical information may be used to deliver requested content, maintain availability, and detect or prevent abuse. Cloudflare describes its processing in its privacy policy. Depending on its services and role, Cloudflare’s own terms and data-processing arrangements may also apply.

Private corporate email administration

A restricted administration area allows one authorized administrator to connect the company’s Resend service, view email, compose messages, and change access credentials. It uses an essential secure session cookie. Login information, password hashes, session records, security counters, and encrypted provider configuration are stored in Cloudflare D1. The Resend API key is held in a Cloudflare Worker secret and is never returned to the browser. Where connected, Resend processes sent and received emails under its service terms. The public corporate pages provide no document-upload facility; their only form is the enquiry form on the Contact page, which does not use the administration session.

Cookies, local storage, and external resources

Public corporate pages do not use application cookies or local storage. The private email area uses only the essential session cookie described above. Cloudflare may use security mechanisms in response to traffic and threats. Fonts and photographs are served from the same website. Following an external link takes you to a separately operated website.

Corporate correspondence

If you contact the company through the enquiry form or a verified corporate channel, your message may contain contact details and business correspondence. Such information should be used to address the enquiry and manage the relevant business relationship, subject to applicable requirements. Confidential identity and financial documents should only be sent using an agreed secure channel.

Retention and protection

Enquiry-form messages are not stored in the website database; they are delivered to the corporate mailbox through Resend and kept there as direct corporate correspondence. Private administrator credentials and encrypted configuration are retained until changed or removed; sessions expire after eight hours and security counters are periodically cleaned. Email content is retrieved from Resend and is not copied into the application database. Hosting-provider retention is governed by the relevant service configuration and provider terms. Retention periods for direct corporate correspondence must be established in line with the company’s jurisdiction, business purpose, and applicable obligations; no fixed period has been verified for publication.

HTTPS protects information in transit. It does not by itself establish the recipient’s identity or make an unverified document exchange appropriate.

Privacy enquiries and applicable rights

Depending on the applicable law and circumstances, individuals may have rights relating to access, correction, deletion, restriction, objection, or complaints to a competent authority. Requests are assessed under the law applicable to the particular processing and relationship. No universal entitlement or specific response period is represented here.

Changes to this notice

This notice is reviewed when information-processing features or the company’s contact arrangements change.